The bugs include a reflected cross-site scripting glitch and a cross-site request forgery vulnerability. WordPress has issued fixes for two bugs rated “medium” in its tooltips plugin, including one ...